Lucene search
+L

1304 matches found

Kitploit
Kitploit
added 2026/09/04 1:31 p.m.10 views

zoneminder-rce-poc

just wait and see Proof of concept for an OS command injection vulnerability in ZoneMinder's event export functionality web/includes/downloadfunctions.php. Monitor names are interpolated directly into shell commands using manual single-quote wrapping instead of escapeshellarg. An attacker who can...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 12:47 a.m.12 views

CVE-2026-76060_ZoneMinder_CommandInjection-PoC

just wait and see Proof of concept for an OS command injection vulnerability in ZoneMinder's event export functionality web/includes/downloadfunctions.php. Monitor names are interpolated directly into shell commands using manual single-quote wrapping instead of escapeshellarg. An attacker who can...

8.8CVSS5.8AI score0.02315EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-76060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitiz...

8.8CVSS7.2AI score0.02315EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/03 11:45 p.m.9 views

CVE-2023-26035

POC for CVE-2023-26035 Works for ZoneMinder Versions prior to 1.36.33 and 1.37.33 Vulnerability : Remote Code Execution RCE Usage root@kitploit: └─➜ python3 poc.py -h usage: poc.py -h --target TARGET --cmd CMD poc.py: error: the following arguments are required: --target, --cmd Curl Before jumpin...

9.8CVSS7.8AI score0.80462EPSS
SaveExploits11References1
Kitploit
Kitploit
added 2026/09/03 5:46 p.m.5 views

CVE-2016-10204_Webshell

CVE-2016-10204Webshell Un script de bash que demuestra la explotación manual de CVE-2016-10204 contra un endpoint objetivo, que lleva a la subida de una webshell php. Actualmente, la variable webshell está configurada para un payload de MySQL. Esto se puede reemplazar con cualquier backend que...

9.8CVSS8.1AI score0.02082EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/03 1:41 a.m.11 views

CVE-2026-27470

⚠️ YASAL UYARI / LEGAL DISCLAIMER Bu araç yalnızca eğitim amaçlı ve yazılı izin alınmış güvenlik testleri için geliştirilmiştir. Sahip olmadığınız veya test etmek için açık yazılı izniniz olmayan sistemlere karşı kullanılması yasadışıdır. Yetkisiz erişim, birçok ülkede ağır cezai yaptırımlara...

8.8CVSS5.8AI score0.0048EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/03 12:59 a.m.9 views

CVE-2026-27470-POC

CVE-2026-27470 — ZoneMinder Second-Order SQL Injection PoC Author:d3vn0mi | CVSS 8.8 | Authenticated | Events Permission Required Overview CVE-2026-27470 is a second-order SQL injection vulnerability in ZoneMinder's web/ajax/status.php — specifically the getNearEvents function...

8.8CVSS5.9AI score0.0048EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/02 10:27 p.m.3 views

sqli-hunter-CVE-2024-51482-PoC

sqli-hunter-CVE-2024-51482-PoC Python scripts for exploiting CVE-2024-51482 SQLi in ZoneMinder — HTB CCTV sqli-hunter — CVE-2024-51482 Description This script automates the extraction of databases, tables, columns, and credentials by exploiting CVE-2024-51482, a Boolean-based SQL Injection...

9.9CVSS8.2AI score0.34979EPSS
SaveExploits8
NVD
NVD
added 2026/08/28 12:18 a.m.14 views

CVE-2026-76060

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitized into a shell command executed via PHP's exec, allowing any authenticated user with View Events permission to execute arbitrary operati...

8.8CVSS0.02315EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/27 8:29 p.m.55 views

CVE-2026-76060

An authenticated OS command injection vulnerability in ZoneMinder's event export functionality allows any user with View Events permission to execute arbitrary commands on the server. The exportFile HTTP parameter is passed unsanitized into a shell command executed via PHP's exec() , enabling ful...

8.8CVSS5.9AI score0.02315EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/27 8:29 p.m.71 views

CVE-2026-76060 OS Command Injection in PayRange API

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitized into a shell command executed via PHP's exec, allowing any authenticated user with View Events permission to execute arbitrary operati...

8.8CVSS0.02315EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/27 8:29 p.m.84 views

CVE-2026-76060 OS Command Injection in PayRange API

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitized into a shell command executed via PHP's exec, allowing any authenticated user with View Events permission to execute arbitrary operati...

8.7CVSS6.1AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.12 views

PT-2026-82281

Name of the Vulnerable Software and Affected Versions ZoneMinder affected versions not specified Description An authenticated OS command injection issue exists in the event export functionality. An authenticated user with View Events permission can execute arbitrary operating system commands on t...

8.8CVSS6.6AI score0.02315EPSS
SaveExploits0References7
ICS
ICS
added 2026/08/25 6:00 a.m.21 views

Zoneminder

ADVISORY SUMMARY Successful exploitation of this vulnerability could result in full Remote Code Execution RCE as the web server user. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...

8.8CVSS6.7AI score0.02315EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2026/08/12 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-72556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the...

8.8CVSS6.8AI score0.00669EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/11 12:17 p.m.6 views

DEBIAN-CVE-2026-72556

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit and canDelete methods invoke nonexistent methods on the ZM\User class, causing PHP call to return a truthy valu...

8.8CVSS6.5AI score0.00669EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/11 12:17 p.m.15 views

CVE-2026-72556

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit and canDelete methods invoke nonexistent methods on the ZM\User class, causing PHP call to return a truthy valu...

8.8CVSS0.00669EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/11 12:17 p.m.12 views

UBUNTU-CVE-2026-72556

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit and canDelete methods invoke nonexistent methods on the ZM\User class, causing PHP call to return a truthy valu...

8.8CVSS6.5AI score0.00669EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/11 11:11 a.m.41 views

CVE-2026-72556 ZoneMinder ZoneMinder - Remote Code Execution

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit and canDelete methods invoke nonexistent methods on the ZM\User class, causing PHP call to return a truthy valu...

8.8CVSS0.00669EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/11 11:11 a.m.10 views

EUVD-2026-56026

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit and canDelete methods invoke nonexistent methods on the ZM\User class, causing PHP call to return a truthy valu...

8.8CVSS6.4AI score0.00669EPSS
SaveExploits0References1
Rows per page
Query Builder